multi updates

Author: wtnlee

articles/virtual-wan/about-nva-hub.md

@@ -25,7 +25,7 @@ Deploying NVAs into a Virtual WAN hub provides the following benefits:
 * **No-hassle provisioning and boot-strapping**: A managed application is prequalified for provisioning and boot-strapping for the Virtual WAN platform. This managed application is available through the Azure Marketplace link.
 * **Simplified routing**: Leverage Virtual WAN's intelligent routing systems. NVA solutions peer with the Virtual WAN hub router and participate in the Virtual WAN routing decision process similarly to Microsoft Gateways.
 * **Integrated support**: Partners have a special support agreement with Microsoft Azure Virtual WAN to quickly diagnose and resolve any customer problems.
-* **Platform-provided lifecycle management**: Upgrades and patches are a part of the Azure Virtual WAN service. This takes away the complexity of lifecycle management from a customer deploying Virtual Appliance solutions.
+* **Platform-provided lifecycle management**: Upgrades and patches are managed either directly by the customer or as part of the Azure Virtual WAN service. For best practices related to software lifecycle management for NVAs in Virtual WAN, please reach out to your NVA provider or reference provider documentation.
 * **Integrated with platform features**: Transit connectivity with Microsoft gateways and Virtual Networks, Encrypted ExpressRoute (SD-WAN overlay running over an ExpressRoute circuit) and Virtual hub route tables interact seamlessly.
 
 > [!IMPORTANT]

articles/virtual-wan/how-to-palo-alto-cloud-ngfw.md

@@ -24,7 +24,7 @@ Palo Alto Networks Cloud NGFW integration with Virtual WAN provides the followin
 * **Protect critical workloads** using a highly scalable SaaS security offering that can be injected as a bump-in-the-wire solution in Virtual WAN.
 * **Fully managed infrastructure and software lifecycle** under software-as-a-service model.
 * **Consumption-based pay-as-you-go** billing.
-* **Cloud-native experience** that has a tight integration with Azure to provide end-to-end Firewall management using Azure portal or Azure APIs. Rule and policy management is also optionally  configurable through Palo Alto Network management solution Panorama.
+* **Cloud-native experience** that has a tight integration with Azure to provide end-to-end Firewall management using Azure portal or Azure APIs. Rule and policy management is also optionally configurable through Palo Alto Network management solution Panorama.
 * **Dedicated and streamlined support channel** between Azure and Palo Alto Networks to troubleshoot issues.
 * **One-click routing** to configure Virtual WAN to inspect on-premises, Virtual Network and Internet-outbound traffic using Palo Alto Networks Cloud NGFW.
 
@@ -79,7 +79,7 @@ To create a new virtual WAN, use the steps in the following article:
 
 ## Known limitations
 
-* Palo Alto Networks Cloud NGFW is only available in the following Azure regions: Central US, East US, East US 2, West US, West US 2, West US 3, North Central US, Brazil South, North Europe, West Europe, UK South, UK West, Australia East, Australia Southeast, UK South, UK West, Canada Central, Japan East, Southeast Asia, and East Asia. Other Azure regions are on the roadmap.
+* Check [Palo Alto Networks documentation]() for the list of regions where Palo Alto Networks Cloud NGFW is available. 
 * Palo Alto Networks Cloud NGFW can't be deployed with Network Virtual Appliances in the Virtual WAN hub.
 * All other limitations in the [Routing Intent and Routing policies documentation limitations section](how-to-routing-policies.md) apply to Palo Alto Networks Cloud NGFW deployments in Virtual WAN.
 
@@ -96,7 +96,7 @@ The following steps describe how to deploy a Virtual Hub that can be used with P
 1. Navigate to your Virtual WAN resource.
 1. On the left hand menu, select **Hubs** under **Connectivity**.
 1. Click on **New Hub**.
-1. Under **Basics** specify a region for your Virtual Hub. Make sure the region is Central US, East US, East US 2, West US, West US 2, West US 3, North Europe, West Europe, Australia East, Australia Southeast, UK South, UK West, Canada Central or East Asia. Additionally, specify a name, address space, Virtual hub capacity and Hub routing preference for your hub.
+1. Under **Basics** specify a region for your Virtual Hub. Make sure the region is listed in [Available Palo Alto Cloud NGFW regions](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/getting-started-with-cngfw-for-azure/supported-regions-and-zones). Additionally, specify a name, address space, Virtual hub capacity and Hub routing preference for your hub.
     :::image type="content" source="./media/how-to-palo-alto-cloudngfw/create-hub.png" alt-text="Screenshot showing hub creation page. Region selector box is highlighted." lightbox="./media/how-to-palo-alto-cloudngfw/create-hub.png":::
 1. Select and configure the Gateways (Site-to-site VPN, Point-to-site VPN, ExpressRoute) you want to deploy in the Virtual Hub. You can deploy Gateways later if you wish.
 1. Click **Review + create**.
@@ -156,7 +156,7 @@ The following section describes common issues seen when using Palo Alto Networks
 
 ### Troubleshooting Cloud NGFW creation
 
-* Ensure your Virtual Hubs are deployed in one of the following regions:Central US, East US, East US 2, West US, West US 2, West US 3, North Central US, Brazil South, North Europe, West Europe, UK South, UK West, Australia East, Australia Southeast, UK South, UK West, Canada Central, Japan East, Southeast Asia, and East Asia. Other regions are in the roadmap.
+* Ensure your Virtual Hubs are deployed in one of the following regions listed in [Palo Alto Networks documentation](https://docs.paloaltonetworks.com/cloud-ngfw/azure/cloud-ngfw-for-azure/getting-started-with-cngfw-for-azure/supported-regions-and-zones).
 * Ensure the Routing status of the Virtual Hub is "Provisioned." Attempts to create Cloud NGFW prior to routing being provisioned will fail.
 * Ensure registration to the **PaloAltoNetworks.Cloudngfw** resource provider is successful.